United Kingdom · Finance · Director/VP (16-20 years)

Director of Risk

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

Start my Director of Risk plan, free

Free to start: a plan built for this role, and a Future Fluency module to try first. No card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Upskilling a team in this role? Talk to us

Experience bandDirector/VP (16-20 years)
Direct reports25-100+ reports
Reports toChief Risk Officer (CRO)
UK framework levelUsually a director, accountable for a division and its numbers

Also advertised as Head of Risk Management · VP, Enterprise Risk · Senior Director, Financial Risk · Risk Lead, Business Unit

Built on 43,079 real UK job descriptions we analysed · grounded in qualifications employers recognise

Two short quizzes about you

1From this job to a course

The qualifications matched to this job

IRM's Level 5 International Certificate in Financial Services Risk Management Institute of Risk Management · Level 5 · covers 8 of 10 standards

CISI Level 3 Certificate in Investment Operations Chartered Institute for Securities & Investment · Level 3 · covers 5 of 10 standards

CISI Level 3 Extended Certificate in Investment Operations Chartered Institute for Securities & Investment · Level 3 · covers 4 of 10 standards

CISI Level 3 Certificate In Risk in Financial Services Chartered Institute for Securities & Investment · Level 3 · covers 2 of 10 standards

NQual Level 5 Diploma in Leadership and Management NQual · Level 5 · covers 2 of 10 standards

IRM's Level 5 International Certificate in Enterprise Risk Management Institute of Risk Management · Level 5 · covers 2 of 10 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Risk context, objectives and assessment IRM's Level 5 International Certificate in Financial Services Risk Management

Risk in Financial Services CISI Level 3 Certificate in Investment Operations

Risk management NQual Level 5 Diploma in Leadership and Management

Risk management competencies IRM's Level 5 International Certificate in Enterprise Risk Management

The future skills this job leans on

AI Fluency working with AI as a thinking partner

Data Fluency turning numbers into a decision

AI Governance Fluency using AI responsibly

Sustainability Fluency building care for people and planet into the work

Foresight Fluency seeing round the corner

Start my Director of Risk plan, free

Your Plan Illustration

Built for Director of Risk

4 units that map to this job, from the qualifications that cover it.

Risk context, objectives and assessment Institute of Risk Management · covers 8 of 10 standards Level 5
Risk in Financial Services Chartered Institute for Securities & Investment · covers 5 of 10 standards Level 3
Risk management NQual · covers 2 of 10 standards Level 5
Risk management competencies Institute of Risk Management · covers 2 of 10 standards Level 5

These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a Director of Risk?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

AI/ML Governance & Ethical Risk
Climate & Environmental Risk Modelling

Why each one is rising

The future skills this job leans on

AI Fluencyworking with AI as a thinking partner
Data Fluencyturning numbers into a decision
AI Governance Fluencyusing AI responsibly
Sustainability Fluencybuilding care for people and planet into the work
Foresight Fluencyseeing round the corner

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Director of Risk plan as you set up, starting with a Future Fluency module on using AI in your job. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Start my Director of Risk plan, free Ready to pay? Subscribe for £70 a month

3What this role really is

A Director of Risk identifies, measures and manages financial risk across a business. The work involves shaping risk strategy and advising senior leaders on how to grow without exposing the firm to unnecessary trouble.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

Excel (Strategic Applications) Strategic

Directing teams on best practices for complex model architecture, reviewing high-level model outputs, and understanding limitations of spreadsheet-based controls for large-scale risk reporting.

SQL (Architectural) Architectural

Defining data schemas for enterprise-wide risk reporting, setting data governance policies, and working with data engineering teams to optimise data pipelines for risk analytics. You won't be writing queries daily, but you'll direct those who do.

Python/R (Strategic Quantitative Oversight) Strategic

Setting the agenda for quantitative analysis, championing the adoption of new analytical techniques (e.g., advanced machine learning for risk), and evaluating new modelling platforms and vendor solutions. You'll understand the code's impact.

GRC Systems (e.g., Archer, ServiceNow GRC) (Architect) Architect

Leading platform selection and implementation projects, integrating GRC with other enterprise systems, and using the aggregated data for strategic board-level reporting on the firm's overall control environment.

Data Visualization (e.g., Tableau, Power BI) (Strategic) Strategic

Defining the enterprise-wide risk reporting strategy, ensuring dashboards provide actionable insights for executive leadership and the Board, and challenging your team on the clarity and impact of visualisations.

Financial Data Terminals (e.g., Bloomberg, Refinitiv Eikon) (Strategic) Strategic

Leveraging market data to inform macroeconomic scenario analysis, setting top-down risk appetite limits, and understanding real-time market movements to guide strategic risk decisions.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choice	Coming in	Where you are now	The step above
Strategic Risk Appetite Setting	No involvement.	Provides data and analysis to support discussions.	Makes recommendations to the CRO; influences executive committee discussions; accountable for implementation within domain.
Major Regulatory Response	Assists with data gathering.	Drafts sections of the response based on guidelines.	Leads the firm's response for their area; directly engages with regulators; approves final submissions.
Risk Model Approval	Executes model runs.	Develops and tests model components.	Approves model methodology and implementation within domain; presents model validation results to committees; accountable for model performance.
Team Hiring & Organisational Design	No involvement.	Interviews junior candidates.	Defines team structure, approves all hires within their function, makes promotion and termination decisions.
Budget Allocation (Functional)	No involvement.	Provides input on tool requirements.	Manages and approves budget up to £5M for their risk function, making decisions on technology, resources, and training.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Operational Risk Loss Reduction

The actual financial losses incurred due to operational failures within your remit.

Target · Reduce annual operational risk losses by £2M-£5M.

In Q2, your team's improved controls for payment processing reduced fraud losses by £750K, contributing to an overall annual reduction of £3M.

Regulatory Compliance Rating

Our official rating from the PRA/FCA on risk management practices and controls in your area.

Target · Achieve 'Satisfactory' or 'Good' ratings on all regulatory exams and internal audits for your domain.

The recent PRA review of our market risk framework, under your leadership, resulted in a 'Good' rating, with no significant findings.

Risk-Weighted Asset (RWA) Optimisation

The efficiency with which we allocate capital against risks, ensuring we meet regulatory requirements without tying up excessive capital.

Target · Optimise RWA by £50M-£100M annually through improved risk modelling and portfolio management.

By refining our credit risk models, your team helped reduce the RWA for our corporate loan book by £60M this year, freeing up capital for new investments.

KRIs and Risk Appetite Breaches

The number of times Key Risk Indicators (KRIs) or overall risk appetite limits are breached within your area, and the speed of remediation.

Target · Reduce critical KRI breaches by 15% year-on-year and ensure 95% of all breaches are remediated within agreed timelines.

Despite market volatility, your proactive monitoring meant only two critical KRI breaches occurred this quarter, both resolved within 48 hours.

Board and Executive Confidence

How much the Board and C-suite trust your risk assessments and recommendations for major strategic decisions.

You're consistently invited to strategic planning meetings, your opinions are sought on major capital allocation or M&A decisions, and senior leaders proactively consult you before committing to new ventures. They respect your challenge.

Risk Culture & Awareness

The extent to which risk management is embedded in the decision-making processes of the business units you oversee.

Business unit leaders proactively raise potential risks, challenge their own assumptions, and integrate risk considerations into their proposals without being prompted. Your team is seen as a partner, not just a 'no' department. We'll look at internal survey results and anecdotal feedback.

Talent Development & Team Strength

Your ability to build, mentor, and retain a high-performing risk team.

Your direct reports consistently meet their performance goals, show clear career progression, and are seen as strong candidates for promotions. We'll look at retention rates within your team and internal mobility success stories. You're building the next generation of risk leaders.

Proactive Risk Identification

How well your team identifies and prepares for 'emerging risks' that aren't yet on everyone's radar.

You regularly present well-researched analyses of new threats (e.g., climate risk, cyber threats, geopolitical shifts) to the executive team, leading to new policies or strategic adjustments before they become urgent problems. You're not just reacting
you're anticipating.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy

Safeguarding the Firm's Future

You'll be waking up thinking about the next potential market shock or regulatory change, and how your team can prepare for it. You'll feel a deep sense of responsibility for protecting the firm's capital and reputation.

Leading the quarterly review of our climate risk exposure, knowing your work directly informs our long-term investment strategy and resilience.

Strategic Impact & Influence

You'll thrive on being in the room where major decisions are made, providing the critical risk perspective that shapes the firm's direction. You want to influence the 'what' and 'how' of our business, not just react to it.

Successfully convincing the executive committee to adjust capital allocation for a new product line based on your team's stress testing results.

Building and Mentoring High-Performing Teams

You'll get satisfaction from seeing your managers and analysts grow, taking on more complex challenges, and becoming future leaders. You're invested in creating a strong, capable risk function.

Watching a junior manager you mentored successfully lead a complex regulatory response, knowing you helped build their capabilities.

What frustrates people

The sheer volume of complex regulatory change that needs to be interpreted and implemented, often with tight deadlines.
Navigating the political landscape between business units who want to take on more risk and your team's mandate to control it.
The challenge of getting consistent, high-quality data from disparate legacy systems across the organisation.
Explaining nuanced statistical concepts to board members who want simple 'yes/no' answers, especially after a market shock.
The slow pace of change in large financial institutions; getting a new risk framework approved and embedded can take years.
Dealing with the aftermath of a risk event that your team warned about, but the business didn't fully act on.

What this role does not give you

A quiet, solitary environment for deep analytical work (you'll be leading and influencing constantly).
The ability to avoid difficult conversations or challenging senior leaders.
A role where you can always be the 'good guy' – sometimes you'll be the bearer of bad news.
A place where every single one of your team's recommendations is immediately adopted without debate or compromise.
A role focused purely on technical modelling; this is about strategy, governance, and people.

8Who you work with

This role directly shapes the risk profile and strategic direction of a significant portion of the firm. Your decisions influence capital allocation, product development, market entry strategies, and our overall resilience against financial shocks. You're essentially safeguarding the firm's licence to operate and its long-term profitability. Get it right, and the firm thrives; get it wrong, and the consequences are severe, from significant financial penalties to loss of market trust.

Inside the business

Chief Executive Officer (CEO)
Chief Financial Officer (CFO)
Heads of Business Units (e.g., Head of Retail Banking, Head of Investment Management)
Board Audit and Risk Committees
Legal & Compliance teams
Internal Audit

Outside the business

Financial Conduct Authority (FCA) & Prudential Regulation Authority (PRA)
External auditors
Investors and rating agencies
Industry bodies and peer groups
Key vendors and technology partners

9What you need before you start

Not a wish list. The things you would be expected to already have.

Extensive experience (10+ years) in a senior risk management role within a regulated financial institution, ideally leading a team or function.
Demonstrated ability to influence at the executive and board level, with a track record of successfully driving significant risk initiatives.
Proven expertise in designing and implementing enterprise-wide risk frameworks, policies, and governance structures.
A deep understanding of quantitative risk modelling, including its strengths, weaknesses, and appropriate application in decision-making.
Significant experience managing regulatory relationships and leading responses to supervisory reviews or examinations.
A strong network within the financial risk community, indicating a reputation as a credible expert.

10What to practise next

Where the job is going, and what to do about it starting this week.

Cloud-Native Risk Platforms

Moving risk analytics and data storage to cloud platforms (AWS, Azure, GCP) offers scalability and cost efficiencies, but also introduces new security, data governance, and operational risks. You'll need to understand how to manage this transition and its implications.

Cloud Security Frameworks · Data Residency & Sovereignty · Serverless Computing for Analytics

This quarter: Meet with our CTO or Head of Cloud to understand our firm's cloud strategy and governance.
Next 6 months: Review a vendor proposal for a cloud-based risk management solution, focusing on the risk implications.
Next 12 months: Lead a risk assessment for a major migration of a risk system to the cloud.
Ongoing: Stay informed on cloud security best practices and regulatory guidance.

Quick win: Ask our IT security team for a quick 30-minute overview of our cloud security posture and what keeps them up at night.

11Staying current once you are in

What people here do to keep up

Regularly attend industry conferences and seminars on emerging risks (e.g., climate risk, cyber risk, AI governance) to stay ahead of the curve.
Participate in executive education programmes focused on strategic leadership, organisational change, or advanced financial risk management.
Actively contribute to industry working groups or professional bodies, influencing the broader risk management landscape.
Mentor junior and mid-level risk professionals, sharing your knowledge and building the next generation of talent.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

AI/ML Governance & Ethical Risk

The rapid adoption of AI and machine learning across financial services for everything from fraud detection to credit scoring creates new, complex risks around bias, explainability, data privacy, and model drift. Regulators are already scrutinising this, and we need to be ahead of the curve.

AI Model Explainability (XAI)
Algorithmic Bias Detection
AI Data Privacy & Security
Regulatory Sandboxes for AI

Climate & Environmental Risk Modelling

Climate change isn't just an environmental issue; it's a financial risk. Regulators (like the PRA) are increasingly requiring firms to quantify and manage both physical risks (e.g., flood impact on mortgages) and transition risks (e.g., impact of carbon taxes on portfolios). This will fundamentally change how we assess long-term credit and market risk.

Physical Risk Assessment
Transition Risk Analysis
Scenario Analysis for Climate Risk
TCFD Reporting Standards

13What you’ll use

What you’ll use

Skills this role draws on

Technical

Value at Risk (VaR) Modelling & Interpretation
Stress Testing & Scenario Analysis Design
Key Risk Indicator (KRI) Framework Design
Risk Control Self-Assessment (RCSA) Governance

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

1
From Lead Risk Analyst / Senior Risk Manager
3-5 years at the previous level
Skills to master
- Transition from deep technical expertise to strategic oversight, develop strong executive communication and influencing skills, master large-team leadership and talent development.
You're ready to move on when
- Successfully led multiple complex, cross-functional risk projects to completion.
- Consistently delivered high-quality, actionable risk insights to senior management.
- Demonstrated ability to mentor and develop junior team members into high performers.
- Proven track record of navigating internal politics and achieving consensus on difficult risk issues.
2
From Head of Regulatory Affairs / Compliance
4-6 years in a leadership role
Skills to master
- Deepen understanding of quantitative risk modelling and capital management, develop a more commercial perspective on risk, and build experience in enterprise-wide risk framework design.
You're ready to move on when
- Successfully managed complex regulatory relationships and led responses to major examinations.
- Demonstrated ability to translate regulatory requirements into practical business changes.
- Strong understanding of internal control frameworks and governance structures.
- Experience in influencing business strategy from a compliance perspective.
3
From External Consulting (Financial Risk)
5-7 years at Principal/Partner level
Skills to master
- Transition from advisory to direct accountability, build and lead an internal operational team, navigate internal organisational dynamics, and embed solutions rather than just recommending them.
You're ready to move on when
- Extensive experience advising multiple financial institutions on risk strategy and implementation.
- Proven ability to manage large client engagements and deliver complex risk transformation projects.
- Strong network within the financial services industry.
- Demonstrated desire to move into a permanent, accountable leadership role.

15Where this role leads

The long view: This role can lead to Chief Risk Officer, a board position as a non-executive director, or a role shaping industry policy through a regulatory body.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Director of Risk is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Risk context, objectives and assessment, worked against Director of Risk.

Risk context, objectives and assessment Level 5

Applied to your work in Director of Risk

The objective of this unit is to enable learners to examine an organisation's internal and external contexts, including its strategic objectives and operating environment, in relation to risk management. Learners will understand the importance of framing objectives and KPIs, examine risks using various techniques, and establish the significance of identified risks linked to risk appetite and tolerance.

How the thinking builds

1 Remember
2 Understand
3 Apply
4 Analyse
5 Evaluate
6 Create

An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

Start my Director of Risk plan, free

See Your Progress Grow Illustration

Director of Risk

Value at Risk (VaR) Modelling & Interpretation
Stress Testing & Scenario Analysis Design
Key Risk Indicator (KRI) Framework Design
Risk Control Self-Assessment (RCSA) Governance

This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Director of Risk is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

Chief Risk Officer (CRO)
3-5 years as Director of Risk

Level 7 (C-Suite)
- Holistic oversight of all risk categories (credit, market, operational, liquidity, reputational, strategic).
- Deep understanding of macro-economic and geopolitical impacts on the entire firm's balance sheet.
- Expertise in managing relationships with global regulators and central banks.
Head of Finance / Business Unit Head
4-6 years as Director of Risk

Level 6/7 (Executive Leadership)
- Deep expertise in financial planning, budgeting, and forecasting.
- Understanding of sales, marketing, and product development lifecycles.
- Experience in driving revenue growth and market share.
- Broader understanding of competitive landscape and market dynamics.

Working with AI on the job

Working with AI

Where AI is starting to help

As a Director of Risk, your time is precious. It's about strategic thinking, influencing, and leading your team—not getting bogged down in endless reports or sifting through mountains of regulatory text. That's where AI comes in. We're building an AI Productivity Hub specifically for our Finance_roles team, designed to free you up for what truly matters.

Imagine having a personal assistant that can summarise complex regulatory documents, draft initial risk reports, or even help you spot anomalies in vast datasets before your morning coffee. This isn't science fiction; it's what our AI tools are starting to do for our risk leaders. We're talking about automating the tedious, leaving you to focus on the strategic, high-impact decisions that only a human can make.

Regulatory Insight Assistant

Feed a new 200-page consultation paper from the PRA or FCA into our LLM-powered tool. It'll summarise the key changes, identify all new reporting requirements, and flag potential impacts on your current policies in minutes. No more weekend reading just to get the gist.

Strategic Report Co-Pilot

Our AI can analyse monthly KRI data, spot significant trends, identify threshold breaches, and generate a first draft of the commentary for your board-level risk committee report. You'll then refine, add your strategic insight, and save hours of initial writing.

Emerging Risk Scout

Use AI to scan global news, academic papers, and industry reports for early signals of 'emerging risks' like climate change impacts, geopolitical shifts, or new cyber threats. It'll help you anticipate what's coming, giving you a head start on building defences.

Governance & Policy Drafter

Need to update a risk policy or draft a new governance document? Our AI can generate initial policy frameworks based on best practices and regulatory requirements, giving you a solid starting point and ensuring consistency across documents.

Common questions

How do you become a Director of Risk?

Common routes in include From Lead Risk Analyst / Senior Risk Manager (3-5 years at the previous level), From Head of Regulatory Affairs / Compliance (4-6 years in a leadership role) and From External Consulting (Financial Risk) (5-7 years at Principal/Partner level). Times vary with prior experience.

Where can a Director of Risk progress to?

This role can lead on to Chief Risk Officer (CRO) (3-5 years as Director of Risk) and Head of Finance / Business Unit Head (4-6 years as Director of Risk), depending on the skills you build.

What new skills matter most for a Director of Risk?

Increasingly, AI/ML Governance & Ethical Risk and Climate & Environmental Risk Modelling. These are the skills our record of this role lists as growing.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my Director of Risk plan, free What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.

Director of Risk

Where should we send it?

Two short quizzes about you

Will AI change your work as a Director of Risk?

What's rising in its place

AI/ML Governance & Ethical Risk

Climate & Environmental Risk Modelling

Skills this role draws on

Technical

How you actually get there, here

From Lead Risk Analyst / Senior Risk Manager

From Head of Regulatory Affairs / Compliance

From External Consulting (Financial Risk)

The credential is what you can do today. These are what keep you valuable.

Roles this leads to

One to one, on the work you already do

Everything else the record holds

The career path, and where it branches

Chief Risk Officer (CRO)

Head of Finance / Business Unit Head

Where AI is starting to help

Regulatory Insight Assistant

Strategic Report Co-Pilot

Emerging Risk Scout

Governance & Policy Drafter

Common questions

Want a read on where you stand?